Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/HOK9PLR2rOszsvn77fckVC5z_Xs.roa
File: HOK9PLR2rOszsvn77fckVC5z_Xs.roa (raw, json)
Hash identifier: RF6PimtmLFKlMw7CQP2kCDV9HUKXKx8zGTkWJkkwlQI=
Subject key identifier: 1C:E2:BD:3C:B4:76:AC:EB:33:B2:F9:FB:ED:F7:24:54:2E:73:FD:7B
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0988
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/HOK9PLR2rOszsvn77fckVC5z_Xs.roa
Signing time: Thu 28 Oct 2021 06:22:09 +0000
ROA not before: Thu 28 Oct 2021 06:22:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 101.3.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2440 (0x988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Oct 28 06:22:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1CE2BD3CB476ACEB33B2F9FBEDF724542E73FD7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:7e:7c:2d:84:88:32:b4:af:d7:e6:50:3f:
90:7d:09:f1:9a:c2:b5:ab:4a:70:3a:2a:c7:8f:10:
97:2f:47:89:e0:d1:83:6a:e8:8a:d7:a5:5c:c2:43:
71:a8:1e:26:30:3f:34:69:c0:db:1a:2e:29:30:76:
89:35:ec:c1:7d:4f:c0:bc:56:93:ed:32:09:92:62:
64:5f:a1:8b:06:2b:c7:4c:85:e0:b0:88:b1:c1:de:
60:55:e9:f3:38:61:6d:6e:18:01:30:52:f0:25:b6:
62:53:e2:5c:58:0c:64:f6:e5:90:27:a6:c1:7f:a3:
34:12:05:bd:5c:e4:77:cd:0b:ee:79:cf:bd:14:f0:
61:20:4b:13:1f:cd:57:11:64:c0:60:b8:70:b4:62:
ce:b2:0e:f8:36:83:f1:70:d9:1c:f3:92:55:67:02:
46:3a:94:96:7e:20:fe:be:dd:b2:f3:6c:99:5e:9a:
1f:c9:52:5e:47:f5:06:68:72:ce:a1:c5:ee:41:47:
76:11:91:8c:69:14:90:d4:3b:15:24:4c:de:65:fa:
82:cb:ea:b8:6a:c8:33:df:1c:41:bb:ce:5f:68:66:
45:99:a8:46:7e:d2:58:fc:7b:97:b4:f6:1d:48:5f:
69:7b:a4:62:fc:c6:bf:cb:60:3c:e1:92:26:b8:5c:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:BD:3C:B4:76:AC:EB:33:B2:F9:FB:ED:F7:24:54:2E:73:FD:7B
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/HOK9PLR2rOszsvn77fckVC5z_Xs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.106.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:a7:ee:67:93:0f:bb:24:b5:78:71:bc:33:1f:35:b2:c3:42:
ad:26:6d:7d:20:cb:7b:c3:96:54:03:dc:bd:f7:03:76:61:f3:
71:c6:98:71:48:82:cb:c6:93:79:70:f2:96:ad:6e:e2:bd:20:
bd:89:df:ed:19:35:1c:bd:d5:64:5e:36:bc:00:3d:22:dd:ff:
f0:25:a9:35:93:66:35:b2:de:ef:46:09:db:74:69:5b:8f:4f:
d8:54:60:1d:e8:cc:18:f1:85:4c:e0:89:1d:e7:61:9b:53:aa:
ef:87:5c:b6:36:ea:4e:46:e9:e5:82:bf:ed:65:73:39:da:6d:
98:27:59:fe:7a:37:22:4d:10:ba:ec:11:74:d1:12:e4:5c:58:
1a:2e:be:30:93:e0:06:c8:f3:80:9f:90:b2:28:eb:fe:20:09:
7e:46:85:f6:76:d2:04:c6:95:76:77:f0:75:c5:3f:f6:b2:b0:
dd:d2:10:a8:b8:e8:72:b8:b4:35:10:3b:8b:fb:d3:4c:ca:f6:
70:63:95:5e:f1:60:06:41:12:48:b0:2f:bc:49:a9:24:fc:4f:
95:76:5e:11:eb:ed:0f:64:33:b8:86:3f:8d:6a:7f:06:20:52:
40:5f:20:7a:aa:35:c9:10:66:d2:30:a1:c8:1f:be:a9:38:ff:
20:6f:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org